{"_id":"@auditme/lsp","name":"@auditme/lsp","dist-tags":{"latest":"0.1.0"},"versions":{"0.1.0":{"name":"@auditme/lsp","version":"0.1.0","description":"AuditMe LSP server — inline production-readiness diagnostics for opencode and VS Code","type":"module","bin":{"auditme-lsp":"dist/server.js"},"scripts":{"build":"tsc","start":"node dist/server.js","prepublishOnly":"npm run build"},"dependencies":{"vscode-languageserver":"^9.0.1","vscode-languageserver-textdocument":"^1.0.12"},"devDependencies":{"@types/node":"^22","typescript":"^5"},"gitHead":"65726182abd747a0dece806a1a9159a82e4da707","_id":"@auditme/lsp@0.1.0","_nodeVersion":"25.9.0","_npmVersion":"11.16.0","dist":{"integrity":"sha512-0HgdQsygUTWxCmg1XzmzEr3385xMDeC1zwtt9mIhZBsBD8L4TjxmvCM3FA/dsFfgbP4a8VqBpCa4iQn/RG8HCA==","shasum":"243357eb2ccee63d412716d1632b2a6dd6d6d856","tarball":"https://registry.npmjs.org/@auditme/lsp/-/lsp-0.1.0.tgz","fileCount":8,"unpackedSize":22597,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQDIIteepyEp5B2e6+ouMuYksbCeMtH0ciTVvkPCcVzG0QIgdeHzeO429YkNoLn+AdVsLZmhKEwdjKS0ns9jPkG+cbc="}]},"_npmUser":{"name":"williedoe","email":"williamnyarko45official@gmail.com"},"directories":{},"maintainers":[{"name":"williedoe","email":"williamnyarko45official@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/lsp_0.1.0_1782054590782_0.9187672504333331"},"_hasShrinkwrap":false}},"time":{"created":"2026-06-21T15:09:50.677Z","0.1.0":"2026-06-21T15:09:50.904Z","modified":"2026-06-21T15:09:51.109Z"},"maintainers":[{"name":"williedoe","email":"williamnyarko45official@gmail.com"}],"description":"AuditMe LSP server — inline production-readiness diagnostics for opencode and VS Code","readme":"# AuditMe LSP Server\n\nInline production-readiness diagnostics for your coding agent. Light up security issues and code smells directly in your editor as you type.\n\n## What it checks (local, instant — no API call)\n\n**Secrets leaked in code:**\n- Stripe live/test keys, AWS access keys, GitHub tokens, Slack tokens, NVIDIA API keys\n- Hardcoded passwords, secrets, API keys, tokens\n\n**Code smells:**\n- `console.log` / `console.error` in production code\n- `debugger` statements\n- `test.only` left in test suites\n- Unresolved `TODO`, `FIXME`, `HACK`, `XXX`\n- `@ts-ignore` / `@ts-expect-error`\n- `eslint-disable-next-line`\n- Deep relative imports\n- Async functions without try/catch\n\n**Full AI audit (requires `NVIDIA_API_KEY`):**\nA `auditme.fullAudit` command runs the full NVIDIA Nemotron analysis on the current file and publishes diagnostics with score, summary, and prioritized issues.\n\n## Setup with opencode\n\nAdd to your `opencode.json`:\n\n```json\n{\n  \"lsp\": {\n    \"auditme\": {\n      \"command\": [\"node\", \"/path/to/auditme/lsp/dist/server.js\"],\n      \"extensions\": [\".ts\", \".tsx\", \".js\", \".jsx\", \".py\", \".go\", \".rs\", \".env\"]\n    }\n  }\n}\n```\n\nWith NVIDIA key for full audits:\n\n```json\n{\n  \"lsp\": {\n    \"auditme\": {\n      \"command\": [\"node\", \"/path/to/auditme/lsp/dist/server.js\"],\n      \"extensions\": [\".ts\", \".tsx\", \".js\", \".jsx\", \".py\", \".go\", \".rs\", \".env\"],\n      \"env\": {\n        \"NVIDIA_API_KEY\": \"nvapi-...\"\n      }\n    }\n  }\n}\n```\n\nThe server must be built first:\n\n```bash\ncd lsp && npm install && npm run build\n```\n","readmeFilename":"README.md","_rev":"1-0bd997173c9b9dfd9197bdd897366d2e"}